Log in Start free

themifyme

Products

ProductCVEsExploitedLatest
Themify Builder16–Oct 30, 2026
Themify Shortcodes3–Apr 16, 2025
Themify Event Post3–Mar 13, 2026
Themify – WooCommerce Product Filter3–Sep 11, 2026
Themify Popup2–Oct 17, 2026
Themify Audio Dock2–Aug 20, 2025
Themify Store Locator1–Dec 13, 2024
Themify Icons1–Aug 20, 2025
Themify Portfolio Post1–Dec 9, 2025
Conditional Menus1–Mar 26, 2026

Exploited and recent CVEs

  • CVE-2026-115869 Medium 6.4 Themify Builder <= 7.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'variations' Repeater Field 0.3%
  • CVE-2026-109989 Medium 6.4 Themify Popup <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'popup_width_unit' Parameter 0.2%
  • CVE-2026-111726 Medium 6.4 Themify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode Attribute 0.2%
  • CVE-2026-96831 High 8.8 WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-95864 High 7.2 Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter 0.3%
  • CVE-2026-78172 Medium 6.1 Themify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site Scripting 0.4%
  • CVE-2026-75027 Medium 5.3 Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action 0.6%
  • CVE-2026-15407 Medium 4.3 Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action 0.5%
  • CVE-2026-57369 High 7.1 WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-15096 Medium 6.4 Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field 0.3%
  • CVE-2026-15097 Medium 6.4 Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field 0.3%
  • CVE-2026-1032 Medium 4.3 Conditional Menus <= 1.2.6 - Cross-Site Request Forgery to Menu Options Update 0.2%
  • CVE-2026-32449 Medium 6.5 WordPress Themify Event Post plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-67533 High 7.1 WordPress Themify Portfolio Post plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-9353 Medium 6.4 Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-58787 Medium 6.5 WordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49392 Medium 5.9 WordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49395 Medium 6.5 WordPress Themify Icons Plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49396 Medium 4.3 WordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-39581 Medium 6.5 WordPress Themify Shortcodes plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-30832 Medium 6.5 WordPress Themify Event Post Plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-30831 High 7.5 WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability 1.1%
  • CVE-2024-13319 Medium 6.1 Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-56239 Medium 6.5 WordPress Themify Audio Dock plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-56216 Medium 6.5 WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability 0.5%
  • CVE-2024-12414 Medium 4.3 Themify Store Locator <= 1.1.9 - Cross-Site Request Forgery 0.2%
  • CVE-2024-52423 Medium 6.5 WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-44046 Medium 5.9 WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-9385 Medium 6.1 Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-7836 Medium 4.3 Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication 0.3%